SQL injection in ajaxSearchLog